I have been dealing with this issue a number of different times now, and each time I work on it I can not determine a solution. I have searched these forums, my firewall forums and worked with a few firewall admins, as well as working with the manufacture support. I have a number of Reolink E1 Zoom cameras that have an FTP function both locally (site1), and remotely (site2). These cameras are not capable of SFTP. In working with the folks on the firewall forums the firewall does not seem to be blocking anything as all rules are right, and we can see traffic to the server.
- I have a locally hosted FTP server (Windows Server 2016) that I want to send all camera FTP files to that sits behind my pfsense firewall.
- I have setup my FTP server bound to port 50022 in passive mode with ports 49152-65534 configured.
- I have a NAT port forward rule set to any source address, or dest address, on source or dest port 50022,ports 49152-65534 and to a NAT IP of my local LAN FTP server (site1).
- If I point to my public IP address for the remote devices (site2), I continue to get FTP test failed, and I only see 3 packets of traffic on my wireshark capture (on the server hosting the FTP) isolated to the src ip address. The traffic is coming in on the correct port 50022, with 1 syn, and then 2 retransmitted syn packs. Screenshot of Wireshark capture I never see the server respond with a syn/ack to the remote (site2). It works fine with the local devices.
- I have tried disabling tcp timestamps as some have suggested, I have ensured TCP V6 is off, I have disabled server side window scaling. Originally I was using the IIS FTP, I switched to Filezilla with the same results. Any ideas?
Thank you,